Security Report Summary
C
Site: | https://www.inthestyle.com/en-IE/ | ||
---|---|---|---|
IP Address: | 104.18.217.221 | ||
Report Time: | 29 Apr 2024 08:43:22 UTC | ||
Headers: |
|
||
Advanced: |
|
Missing Headers
Content-Security-Policy | Content Security Policy is an effective measure to protect your site from XSS attacks. By whitelisting sources of approved content, you can prevent the browser from loading malicious assets. |
---|---|
Referrer-Policy | Referrer Policy is a new header that allows a site to control how much information the browser includes with navigations away from a document and should be set by all sites. |
Permissions-Policy | Permissions Policy is a new header that allows a site to control which features and APIs can be used in the browser. |
Raw Headers
HTTP/2 | 103 |
---|---|
link | <https://cdn.myshopline.com>; rel=preconnect, <https://cdn-theme.myshopline.com>; rel=preconnect, <https://img.myshopline.com>; rel=preconnect, <https://img-va.myshopline.com>; rel=preconnect |
HTTP/2 200 | |
date | Mon, 29 Apr 2024 08:43:22 GMT |
content-type | text/html; charset=utf-8 |
cf-ray | 87be01012851fa92-SJC |
cf-cache-status | DYNAMIC |
cache-control | private, max-age=0, no-cache, no-store |
content-language | en-IE |
link | <https://cdn.myshopline.com>; rel="preconnect", <https://cdn-theme.myshopline.com>; rel="preconnect", <https://img.myshopline.com>; rel="preconnect", <https://img-va.myshopline.com>; rel="preconnect" |
set-cookie | n_u=2322a06be971847783487eaf244fde37; path=/; expires=Fri, 31 Dec 9999 23:59:59 GMT; samesite=none; secure |
strict-transport-security | max-age=15552000; includeSubDomains; preload |
vary | Accept-Encoding, Origin |
x-content-type-options | nosniff |
x-download-options | noopen |
x-frame-options | SAMEORIGIN |
x-le-render-mode | stream-like |
x-le-theme | Arise |
x-le-theme-id | 648985eee9b62a09660d3f00 |
x-le-theme-version | 1.3.45 |
x-readtime | 1376 |
x-response-id | 26dd2618d078a0734c865d8c1fbb5c24 |
x-response-time | 1376 |
x-worker-cache-key | https://www.inthestyle.com/en-IE/?key=SPIDER:NON_QUERY:US |
x-xss-protection | 1; mode=block |
set-cookie | f_ds_info=xFjRRT4AigYYzMWiIPQlmvGXfkNneGd1LDskKbU7H4/VxAZpqwi5oT6kNj7JhVuzYEZKj5kOO+OxU5eNBLt8HQ==; path=/; secure |
set-cookie | f_ds_info.sig=pgjouwV-j8hEF69EY14JH4BkUk9COfX70RKY38gscZY; path=/; secure |
set-cookie | store_id=1681718798653; path=/; secure |
set-cookie | store_id.sig=m7iGcrVecQVjVG1m17Q1Rj91GxIWor3gQ2gl-and_A0; path=/; secure |
set-cookie | merchant_id=2005064183; path=/; secure |
set-cookie | merchant_id.sig=8OzuTdYyMFsp-XeO84TgjPIfou9iWbQs3g0W_WD4f1U; path=/; secure |
set-cookie | currency_code=EUR; path=/; secure |
set-cookie | currency_code.sig=L4WhZ7AJniBbEAOqcbpPiXwO_H9RXUkAhAsYK_RVNxk; path=/; secure |
set-cookie | localization=IE; path=/; max-age=31536000; expires=Tue, 29 Apr 2025 08:43:21 GMT; samesite=lax; secure |
set-cookie | lang=en; path=/; secure |
set-cookie | lang.sig=HPZEXM6qRQA3fl9QF0Gl5KM_KZ7FwUtDpVV9UEUrrek; path=/; secure |
set-cookie | addressLang=en; path=/; secure |
set-cookie | addressLang.sig=fZhLaUxh_564Gt_Ygb8agf56cVb1lYYp6NMpk7wfgaM; path=/; secure |
set-cookie | userSelectLocale=en; path=/; secure |
set-cookie | userSelectLocale.sig=xaWhkiDLccJKOWtBx98z0KVVx7o_iP0WoEYPBrEqJCw; path=/; secure |
set-cookie | store_block_region_status=0; path=/; max-age=1800; expires=Mon, 29 Apr 2024 09:13:21 GMT; secure; httponly |
set-cookie | n_sess={"session_id":"704f74f8-f9f5-4c8e-bf5d-289981ea266a","created_at":1714380202583,"last_session_id":"","session_create_type":101}; path=/; secure |
set-cookie | _cmp_a=%7B%22purposes%22%3A%7B%22a%22%3Atrue%2C%22p%22%3Atrue%2C%22m%22%3Atrue%2C%22t%22%3Atrue%7D%2C%22display_banner%22%3Afalse%7D; Max-Age=86400; Path=/; SameSite=Lax |
set-cookie | _tracking_consent=%7B%22reg%22%3A%22%22%2C%22con%22%3A%7B%22CMP%22%3A%7B%22m%22%3A%22%22%2C%22a%22%3A%22%22%2C%22p%22%3A%22%22%2C%22s%22%3A%22%22%7D%7D%2C%22lim%22%3A%5B%22GDPR_BLOCK_ALL%22%5D%2C%22v%22%3A%222.1%22%7D; Max-Age=31536000; Path=/; SameSite=Lax |
set-cookie | __cf_bm=8HiXXz4wefVi_EGAxOwR_bCYFAM8LgYM5ZOpzrFQY8A-1714380202-1.0.1.1-YQqAjSfWuMpps0gilxuKRZRAfculJ.SvwAZw5PiPECrqCcYc0EdZRwsOgZCqEzjklKjH0JTikJ8RsHrB.xKBUw; path=/; expires=Mon, 29-Apr-24 09:13:22 GMT; domain=.www.inthestyle.com; HttpOnly; Secure; SameSite=None |
server | cloudflare |
content-encoding | gzip |
alt-svc | h3=":443"; ma=86400 |
Upcoming Headers
Cross-Origin-Embedder-Policy | Cross-Origin Embedder Policy allows a site to prevent assets being loaded that do not grant permission to load them via CORS or CORP. |
---|---|
Cross-Origin-Opener-Policy | Cross-Origin Opener Policy allows a site to opt-in to Cross-Origin Isolation in the browser. |
Cross-Origin-Resource-Policy | Cross-Origin Resource Policy allows a resource owner to specify who can load the resource. |
Additional Information
strict-transport-security | HTTP Strict Transport Security is an excellent feature to support on your site and strengthens your implementation of TLS by getting the User Agent to enforce the use of HTTPS. |
---|---|
x-content-type-options | X-Content-Type-Options stops a browser from trying to MIME-sniff the content type and forces it to stick with the declared content-type. The only valid value for this header is "X-Content-Type-Options: nosniff". |
x-frame-options | X-Frame-Options tells the browser whether you want to allow your site to be framed or not. By preventing a browser from framing your site you can defend against attacks like clickjacking. |
x-xss-protection | X-XSS-Protection sets the configuration for the XSS Auditor built into older browsers. The recommended value was "X-XSS-Protection: 1; mode=block" but you should now look at Content Security Policy instead. |
set-cookie | The 'httpOnly' flag is not set on this cookie. There is no Cookie Prefix on this cookie. This is not a SameSite Cookie. |
server | Server value has been changed. Typically you will see values like "Microsoft-IIS/8.0" or "nginx 1.7.2". |